Detik News- Exploit DB
- [local] HCL Lotus Notes V12 - Unquoted Service Path December 6, 2021HCL Lotus Notes V12 - Unquoted Service Path
- [remote] Auerswald COMpact 8.0B - Privilege Escalation December 6, 2021Auerswald COMpact 8.0B - Privilege Escalation
- [remote] Auerswald COMfortel 2.8F - Authentication Bypass December 6, 2021Auerswald COMfortel 2.8F - Authentication Bypass
- [remote] Auerswald COMpact 8.0B - Arbitrary File Disclosure December 6, 2021Auerswald COMpact 8.0B - Arbitrary File Disclosure
- [remote] Auerswald COMpact 8.0B - Multiple Backdoors December 6, 2021Auerswald COMpact 8.0B - Multiple Backdoors
- [webapps] Croogo 3.0.2 - Remote Code Execution (Authenticated) December 6, 2021Croogo 3.0.2 - Remote Code Execution (Authenticated)
- [webapps] Online Pre-owned/Used Car Showroom Management System 1.0 - SQLi Authentication Bypass December 3, 2021Online Pre-owned/Used Car Showroom Management System 1.0 - SQLi Authentication Bypass
- [webapps] Online Magazine Management System 1.0 - SQLi Authentication Bypass December 3, 2021Online Magazine Management System 1.0 - SQLi Authentication Bypass
- [webapps] WordPress Plugin All-in-One Video Gallery plugin 2.4.9 - Local File Inclusion (LFI) December 3, 2021WordPress Plugin All-in-One Video Gallery plugin 2.4.9 - Local File Inclusion (LFI)
- [webapps] WordPress Plugin Slider by Soliloquy 2.6.2 - 'title' Stored Cross Site Scripting (XSS) (Authenticated) December 3, 2021WordPress Plugin Slider by Soliloquy 2.6.2 - 'title' Stored Cross Site Scripting (XSS) (Authenticated)
- [webapps] WordPress Plugin DZS Zoomsounds 6.45 - Arbitrary File Read (Unauthenticated) December 3, 2021WordPress Plugin DZS Zoomsounds 6.45 - Arbitrary File Read (Unauthenticated)
- [webapps] Online Enrollment Management System in PHP and PayPal 1.0 - 'U_NAME' Stored Cross-Site Scripting December 1, 2021Online Enrollment Management System in PHP and PayPal 1.0 - 'U_NAME' Stored Cross-Site Scripting
- [local] MilleGPG5 5.7.2 Luglio 2021 - Local Privilege Escalation December 1, 2021MilleGPG5 5.7.2 Luglio 2021 - Local Privilege Escalation
- [webapps] Laundry Booking Management System 1.0 - Remote Code Execution (RCE) November 30, 2021Laundry Booking Management System 1.0 - Remote Code Execution (RCE)
- [webapps] orangescrum 1.8.0 - 'Multiple' SQL Injection (Authenticated) November 29, 2021orangescrum 1.8.0 - 'Multiple' SQL Injection (Authenticated)
- [local] HCL Lotus Notes V12 - Unquoted Service Path December 6, 2021
Category Archives: Security
Menonaktifkan Open DNS Server BIND
Beberapa waktu lalu, tim abuse dari salah satu penyedia VPS (Virtual Private Server) yang saya gunakan meneruskan email komplain ke saya terkait dengan digunakannya server VPS saya sebagai reflektor serangan DDoS ke server di Eropa. Setelah saya cek, ternyata ada … Continue reading
Posted in IT, Security, Tips and Tricks
Leave a comment
[Update] WordPress 0day XSS Vulnerability
Buat teman-teman yang mempunyai website/blog menggunakan wordpress, diharapkan segera melakukan update ke wordpress terbaru 4.2.1 berhubung adanya vulnerability 0day XSS dimana penyerang bisa membuat komentar di post/page manapun dan menyisipkan script XSS yang bisa mendapatkan/eksekusi perintah di server. Referensi bisa … Continue reading
Cpanel Down
Siang ini saya coba mengakses cpanel.net dan sepertinya database sedang mengalami masalah. Bisa dibayangkan kalau corporate sebesar Cpanel masih mengalami masalah classic seperti ini. Bagaimana kesiapan Anda dalam hal menangani bisnis Anda yang berhubungan dengan koneksi ke pusat data mengalami … Continue reading
Posted in IT, Security
Leave a comment
Hati-hati pencurian password email
yahoo scam, stolen password yahoo Continue reading
Posted in IT, Security, Tips and Tricks
Leave a comment
Forecast vulnerability Pligg CMS
Saya cukup kaget melihat ada forecast vulnerability di situs securityfocus.com. Bisa dilihat di screenshoot disamping atau coba klik http://www.securityfocus.com/bid/51273. Aneh tapi cukup nyata.
Posted in IT, Security
Leave a comment